Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393963303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393963303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          F8ch2IwW5ycwItx6J2k4v9FIjXgicf9OIn6FnbNVfZs=
Subject key identifier:   10:59:49:28:B4:3B:2B:DE:CA:1A:A5:91:90:65:B4:89:72:62:E1:1A
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       23137B9A5781E48E826D610BBBBF67E9461D3634
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393963303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:09 +0000
ROA not before:           Sun 03 May 2026 02:59:09 +0000
ROA not after:            Sun 02 May 2027 03:04:09 +0000
asID:                     133798
IP address blocks:        2402:5680:99c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:7b:9a:57:81:e4:8e:82:6d:61:0b:bb:bf:67:e9:46:1d:36:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:09 2026 GMT
            Not After : May  2 03:04:09 2027 GMT
        Subject: CN=10594928B43B2BDECA1AA5919065B4897262E11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:f5:b6:55:32:e1:0d:4b:f4:d7:ee:5d:7c:
                    5a:12:34:d4:7f:7f:f9:05:53:11:8c:62:e0:d1:74:
                    a0:ef:70:dd:98:d6:26:4a:2a:04:95:13:6f:7e:1f:
                    44:25:24:7b:7a:9d:c8:2a:11:d1:f7:7a:19:de:e0:
                    3e:7e:cf:e2:a7:43:f5:78:93:17:8f:5c:e3:a2:3a:
                    2d:94:e3:c3:c6:b9:3b:ed:30:0b:ae:00:ef:17:37:
                    37:b6:70:f5:88:ee:ec:21:01:1e:d1:33:2a:09:0d:
                    c1:2a:33:68:21:57:67:6f:d4:08:55:82:eb:86:16:
                    68:a0:b8:eb:b8:19:f0:84:9f:f8:0c:b6:22:a1:2e:
                    cb:37:0d:d1:77:f6:06:0c:7a:50:82:cc:ad:9a:34:
                    62:c5:81:27:2e:7a:09:2e:a9:74:b2:d4:00:54:50:
                    18:9f:31:b2:4b:ec:08:28:37:ae:d0:db:80:52:2c:
                    75:88:da:08:ca:a4:23:69:9d:78:10:fa:3d:d4:90:
                    bf:88:8b:eb:73:75:2d:ff:4c:d6:1c:1c:c0:b5:7a:
                    60:91:53:84:5f:9e:d7:5e:c2:ff:10:85:13:cc:9a:
                    b7:83:1e:47:13:2d:c2:ce:7e:1b:72:08:36:67:54:
                    9d:00:d9:fd:a8:20:48:e4:95:92:85:ac:f4:16:9c:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:49:28:B4:3B:2B:DE:CA:1A:A5:91:90:65:B4:89:72:62:E1:1A
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393963303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:99c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:b5:7e:ad:c9:62:5e:9f:48:b7:46:ee:2a:d8:30:a2:16:e9:
         18:34:c7:32:aa:e1:7e:ed:25:ff:ab:ba:25:d2:b9:88:0a:0c:
         25:fc:e6:16:fc:73:e9:d6:aa:4f:39:16:45:57:7b:67:f5:7d:
         47:ee:22:fb:6f:c6:4f:2c:d8:36:97:0d:2b:1b:56:54:17:fc:
         f5:33:e3:33:43:54:29:15:99:ba:1b:d1:81:de:5c:b5:e1:77:
         0c:8c:8f:d6:82:86:7e:b1:f3:95:58:67:e4:12:b5:03:cf:15:
         19:11:d8:9c:a6:24:e9:0c:64:40:0d:0a:5b:91:41:37:01:5d:
         05:8a:c6:15:51:e8:d6:3a:ae:34:a0:fe:98:0c:56:fe:aa:5a:
         2d:00:72:7c:5f:57:d6:33:1a:78:97:5d:59:a2:77:f2:7a:41:
         b9:73:f5:95:22:33:7d:aa:96:2f:30:9a:e8:a0:a2:16:28:d0:
         5b:22:ab:88:47:98:29:c7:25:e8:c1:07:19:f8:c0:69:cf:99:
         02:af:d3:1f:8c:56:3e:af:8d:c9:89:ec:f4:ec:9b:aa:87:78:
         e9:7d:9d:eb:94:df:34:52:73:4e:95:4b:81:d8:26:6d:93:41:
         e2:78:ee:1d:b1:65:e0:78:fd:18:0b:9d:f2:1a:41:7c:51:b8:
         d1:8c:99:bb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIxN7mleB5I6CbWELu79n6UYdNjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MDlaFw0yNzA1MDIwMzA0MDlaMDMxMTAvBgNV
BAMTKDEwNTk0OTI4QjQzQjJCREVDQTFBQTU5MTkwNjVCNDg5NzI2MkUxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQ/W2VTLhDUv01+5dfFoSNNR/
f/kFUxGMYuDRdKDvcN2Y1iZKKgSVE29+H0QlJHt6ncgqEdH3ehne4D5+z+KnQ/V4
kxePXOOiOi2U48PGuTvtMAuuAO8XNze2cPWI7uwhAR7RMyoJDcEqM2ghV2dv1AhV
guuGFmiguOu4GfCEn/gMtiKhLss3DdF39gYMelCCzK2aNGLFgScuegkuqXSy1ABU
UBifMbJL7AgoN67Q24BSLHWI2gjKpCNpnXgQ+j3UkL+Ii+tzdS3/TNYcHMC1emCR
U4Rfntdewv8QhRPMmreDHkcTLcLOfhtyCDZnVJ0A2f2oIEjklZKFrPQWnG5dAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUEFlJKLQ7K97KGqWRkGW0iXJi4RowHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzOTYzMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAmcAwDQYJKoZIhvcNAQELBQADggEBALi1fq3JYl6fSLdG7irYMKIW6Rg0xzKq
4X7tJf+ruiXSuYgKDCX85hb8c+nWqk85FkVXe2f1fUfuIvtvxk8s2DaXDSsbVlQX
/PUz4zNDVCkVmbob0YHeXLXhdwyMj9aChn6x85VYZ+QStQPPFRkR2JymJOkMZEAN
CluRQTcBXQWKxhVR6NY6rjSg/pgMVv6qWi0AcnxfV9YzGniXXVmid/J6Qblz9ZUi
M32qli8wmuigohYo0Fsiq4hHmCnHJejBBxn4wGnPmQKv0x+MVj6vjcmJ7PTsm6qH
eOl9neuU3zRSc06VS4HYJm2TQeJ47h2xZeB4/RgLnfIaQXxRuNGMmbs=
-----END CERTIFICATE-----
Generated at Wed May 13 12:29:06 2026 by rpki-client